Figure \ref{fig:SpecificationLanguage} shows the four building blocks of \SAR: (1) \textsf{DynamicState}, (2) \textsf{Declaration}s, (3) \textsf{SecurityRule}s and (4) \textsf{DynamicMappingRule}s. The \emph{Dynamic State} is a partial representation of the runtime state of the application and is automatically maintained and managed by the  \textsc{Pdp}. The other blocks define the \emph{configuration} of the security mechanisms and are presented successively in the following: \textsf{SecurityRule}s are introduced in Section \ref{sec:security-rules}; then \textsf{Declaration}s and \textsf{DynamicMappingRule}s are described in Section \ref{sec:StaticRules}. A comprehensive example is given in Section \ref{sec:Application-Example} to illustrate the specification of security configurations.

\begin{figure*}[t]
	\center
	\resizebox{\textwidth}{!}{\includegraphics{DSL.png}}	
	\caption{The \SAR Metamodel}
	\label{fig:SpecificationLanguage}
  % \vspace{-0.5cm}
\end{figure*}

\input{SecurityRules}
\input{StaticMapping}
\input{DynamicBinding}
\input{ApplicationExample}


